Adeline Okawa

About Adeline Okawa

I’m a results-driven Cybersecurity and Cloud Security Engineer with over 7 years of experience securing data, systems, and cloud infrastructure across the healthcare, financial, and federal sectors. My expertise lies in applying regulatory frameworks—NIST 800-53, ISO 27001, PCI-DSS, HIPAA, GDPR, FedRAMP—to safeguard information assets and ensure continuous compliance. Whether it\'s performing risk assessments, managing POA & Ms, leading vulnerability scans with Nessus, or driving IAM solutions in AWS and Azure, I bring a strategic, detail-oriented mindset to every challenge. I’ve supported system security documentation (SSP, PIA, CP, RA), conducted penetration testing, and collaborated across CloudOps, DevOps, and compliance teams to build robust cyber defenses. From protecting PHI in healthcare environments to ensuring FedRAMP readiness for federal agencies, I’m passionate about aligning cybersecurity with business goals while enhancing audit readiness, incident response, and security training. Let’s connect if you’re looking for a proactive security professional committed to building resilient and compliant systems in today’s evolving threat landscape.

Experience

1. Cyber Security Engineer

   Booz Allen Hamilton

   Jan 2022 — Present · Washington, DC, US

   Responsible for reviewing security plans (SP), contingency plans (CP), contingency plan tests (CPT), privacy impact assessments (PIA), and risk assessment (RA) documents per NIST 800 guidelines for various government agencies.• Support and assess FedRAMP system security strategy, including revising control implementation statements, writing security control implementation statements, collecting security control implementation reviews, penetration testing, and vulnerability scan results for reporting to authorizing agencies.• Review and update FISMA Reports and Standard Operating Procedures (SOP) to comply with FISMA law and NIST controls.• Review and update system categorizations using FIPS 199, Initial Risk Assessment, E-authentication, PTA, PIA, SAR, SSP, SAP & POA & M in preparation for AA package.• Manage identity and access management (IAM) for cloud platforms, including user provisioning, access controls, and authentication mechanisms.• Provide cybersecurity awareness feedback and recommendations on improving networks and systems currently deployed or under development by the client, including information related to timelines of incidents and their impacts.• Implement design principles to improve the security posture for Authentication, Authorization, Monitoring, Auditing, Encryption, and Data path security.• Utilize Nessus vulnerability scans and other IDS monitoring and management tools (SIEM) to collect and analyze large volumes of logs, network traffic, and alerts to assess, prioritize, and differentiate between potential intrusion attempts and false alarms.• Collaborate with CloudOps, DevOps, and IT Engineers on security technologies and best practices.• Conduct regular security assessments and penetration testing to identify and address vulnerabilities, including management and hardening, threat and intrusion detection, and container security.

Education

• University of Buea

  Bachelor's degree

  2011 — 2014